Tools

ffuf/ffuf

Fast web fuzzer written in Go

vladko312/sstimap

Automatic SSTI detection tool with interactive interface

ticarpi/jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

vavkamil/awesome-bugbounty-tools

Curated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…

wapiti-scanner/wapiti

Web vulnerability scanner written in Python3

yaklang/yakit

All-in-one penetration testing platform with MITM proxy, web fuzzer, reverse connection handler, and plugin system for automated security testing and…

hellsender01/llmmap

Automated prompt injection testing framework for LLM-integrated applications with dual-LLM architecture.

flankerhqd/vendor-android-cves

Collections of my POCs for android vendor CVEs

sysnets/atfuzzer

Grammar-guided evolutionary fuzzer for dynamic analysis of AT command interfaces on Android smartphones via Bluetooth and USB, uncovering DoS,…

tismayil/fastfuz-chrome-ext

Chrome extension for fast web fuzzing to discover hidden files and directories during penetration testing and vulnerability analysis.

x3omdax/penbox

PenBox - A Penetration Testing Framework - The Tool With All The Tools , The Hacker's Repo

yakuza8/peniot

PENIOT: Penetration Testing Tool for IoT

ucsb-seclab/difuze

Fuzzer for Linux Kernel Drivers

andreiverse/vaf

Multi-threaded web fuzzer for URL path, HTTP header, and POST data brute-forcing with proxy support, status code filtering, and reflexive content…

localh0t/backfuzz

protocol fuzzing toolkit

michenriksen/jdam

A structure-aware JSON fuzzer

ericmtzmtz/pwnproxy

An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.

omar2535/graphqler

☸The first ever dependency-aware GraphQL API testing tool!